X

Vous n'êtes pas connecté

Maroc Maroc - SECURITYAFFAIRS.CO - A La Une - 05/01/2025 19:06

Nuclei flaw allows signature bypass and code execution

A vulnerability in Nuclei, an open-source vulnerability scanner, could allow attackers to bypass signature checks and execute malicious code. A high-severity security flaw, tracked as CVE-2024-43405 (CVSS score of 7.4), in the open-source vulnerability scanner ProjectDiscovery’s Nuclei, could allow attackers to bypass signature checks and execute malicious code. The Wiz’s engineering team discovered the vulnerability. The vulnerability […]

Articles similaires

Sorry! Image not available at this time

Critical TP-Link VIGI camera flaw allowed remote takeover of surveillance systems

securityaffairs.co - 20/Jan 15:20

TP-Link fixed a critical flaw that exposed over 32 VIGI C and VIGI InSight camera models to remote hacking, with over 2,500 internet-exposed devices...

Sorry! Image not available at this time

Critical sandbox escape flaw found in popular vm2 NodeJS library

bleepingcomputer.com - 27/Jan 16:35

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary...

Sorry! Image not available at this time

Critical sandbox escape flaw found in popular vm2 NodeJS library

bleepingcomputer.com - 27/Jan 16:35

A critical-severity vulnerability in the vm2 Node.js sandbox library, tracked as CVE-2026-22709, allows escaping the sandbox and executing arbitrary...

Sorry! Image not available at this time

Apache Hadoop Vulnerability Exposes Systems Potential Crashes or Data Corruption

itsecuritynews.info - 26/Jan 10:09

A moderate-severity vulnerability in the Hadoop Distributed File System (HDFS) native client could allow attackers to trigger system crashes or...

Sorry! Image not available at this time

Apache Hadoop Vulnerability Exposes Systems Potential Crashes or Data Corruption

itsecuritynews.info - 26/Jan 10:09

A moderate-severity vulnerability in the Hadoop Distributed File System (HDFS) native client could allow attackers to trigger system crashes or...

Sorry! Image not available at this time

Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)

securityaffairs.co - 28/Jan 15:53

Fortinet released fixes for a critical FortiOS SSO auth bypass (CVE-2026-24858) actively exploited, impacting FortiOS, FortiManager, and...

Sorry! Image not available at this time

Zoom fixed critical Node Multimedia Routers flaw

securityaffairs.co - 21/Jan 18:33

Zoom addressed a critical security vulnerability, tracked as CVE-2026-22844, that could result in remote code execution. Cloud-based video...

Sorry! Image not available at this time

Cisco fixed actively exploited Unified Communications zero day

securityaffairs.co - 21/Jan 23:47

Cisco patched a critical zero-day RCE flaw (CVE-2026-20045) in Unified Communications and Webex Calling that is actively exploited in the wild. Cisco...

Sorry! Image not available at this time

Cisco Patches ISE XML Flaw with Public Exploit Code

itsecuritynews.info - 25/Jan 18:12

  Cisco has recently addressed a significant security vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector...

Sorry! Image not available at this time

Cisco Patches ISE XML Flaw with Public Exploit Code

itsecuritynews.info - 25/Jan 18:12

  Cisco has recently addressed a significant security vulnerability in its Identity Services Engine (ISE) and ISE Passive Identity Connector...